Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

galaxy_watch

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

14
Related CVEsRelated VendorsRelated AssignersReports
14Vulnerabilities found
CVE-2025-21045
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-4||MEDIUM
EPSS-0.12% / 1.93%
||
7 Day CHG~0.00%
Published-10 Oct, 2025 | 06:33
Updated-09 Jan, 2026 | 18:11
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watch_6galaxy_watchgalaxy_watch_7wear_osgalaxy_watch_5galaxy_watch_ultragalaxy_watch_4galaxy_watch_5_progalaxy_watch_4_classicgalaxy_watch_fegalaxy_watch_6_classicSamsung Mobile Devices
CWE ID-CWE-922
Insecure Storage of Sensitive Information
CVE-2025-21004
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-6.2||MEDIUM
EPSS-0.08% / 0.23%
||
7 Day CHG~0.00%
Published-08 Jul, 2025 | 10:34
Updated-20 Jan, 2026 | 14:41
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watch_ultragalaxy_watch_4_classicgalaxy_watch_7galaxy_watchwear_osgalaxy_watch_fegalaxy_watch_5galaxy_watch_4galaxy_watch_6_classicgalaxy_watch_5_progalaxy_watch_6Samsung Mobile Devices
CWE ID-CWE-347
Improper Verification of Cryptographic Signature
CVE-2025-20998
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-5.5||MEDIUM
EPSS-0.12% / 2.37%
||
7 Day CHG~0.00%
Published-08 Jul, 2025 | 10:34
Updated-20 Jan, 2026 | 14:42
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watch_ultragalaxy_watch_4_classicgalaxy_watch_7galaxy_watchwear_osgalaxy_watch_fegalaxy_watch_5galaxy_watch_4galaxy_watch_6_classicgalaxy_watch_5_progalaxy_watch_6Samsung Mobile Devices
CVE-2025-20997
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-6.2||MEDIUM
EPSS-0.12% / 1.91%
||
7 Day CHG~0.00%
Published-08 Jul, 2025 | 10:34
Updated-20 Jan, 2026 | 15:09
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watch_ultragalaxy_watch_4_classicgalaxy_watch_7galaxy_watchwear_osgalaxy_watch_fegalaxy_watch_5galaxy_watch_4galaxy_watch_6_classicgalaxy_watch_5_progalaxy_watch_6Samsung Mobile Devices
CVE-2025-20986
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-5.5||MEDIUM
EPSS-0.12% / 2.61%
||
7 Day CHG~0.00%
Published-04 Jun, 2025 | 04:56
Updated-02 Feb, 2026 | 18:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watchgalaxy_watch_6_classicwear_osgalaxy_watch_ultragalaxy_watch_6galaxy_watch_fegalaxy_watch_7galaxy_watch_4galaxy_watch_4_classicgalaxy_watch_5_progalaxy_watch_5Samsung Mobile Devices
CVE-2025-20984
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-6.8||MEDIUM
EPSS-0.12% / 2.54%
||
7 Day CHG~0.00%
Published-04 Jun, 2025 | 04:56
Updated-02 Feb, 2026 | 18:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watchgalaxy_watch_6_classicwear_osgalaxy_watch_ultragalaxy_watch_6galaxy_watch_fegalaxy_watch_7galaxy_watch_4galaxy_watch_4_classicgalaxy_watch_5_progalaxy_watch_5Samsung Mobile Devices
CWE ID-CWE-276
Incorrect Default Permissions
CVE-2025-20956
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-4.3||MEDIUM
EPSS-0.16% / 5.41%
||
7 Day CHG~0.00%
Published-07 May, 2025 | 08:24
Updated-15 Jan, 2026 | 16:19
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to access developer settings.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watch_6_classicgalaxy_watch_fegalaxy_watch_7galaxy_watch_5_progalaxy_watch_4galaxy_watch_4_classicwear_osgalaxy_watch_5galaxy_watchgalaxy_watch_ultragalaxy_watch_6Samsung Mobile Devices
CVE-2025-20946
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-8.8||HIGH
EPSS-0.26% / 17.42%
||
7 Day CHG~0.00%
Published-08 Apr, 2025 | 04:50
Updated-26 Feb, 2026 | 18:28
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watch_6galaxy_watch_fegalaxy_watch_7wear_osgalaxy_watchgalaxy_watch_4galaxy_watch_5_progalaxy_watch_6_classicgalaxy_watch_5galaxy_watch_ultragalaxy_watch_4_classicSamsung Mobile Devices
CVE-2025-20939
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-5.4||MEDIUM
EPSS-0.18% / 8.27%
||
7 Day CHG~0.00%
Published-08 Apr, 2025 | 04:49
Updated-27 Jan, 2026 | 17:54
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices.

Action-Not Available
Vendor-SamsungSamsung Electronics
Product-galaxy_watch_6galaxy_watch_fegalaxy_watch_7wear_osgalaxy_watchgalaxy_watch_4galaxy_watch_5_progalaxy_watch_6_classicgalaxy_watch_5galaxy_watch_ultragalaxy_watch_4_classicSamsung Mobile Devices
CVE-2025-20945
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-4||MEDIUM
EPSS-0.16% / 5.21%
||
7 Day CHG~0.00%
Published-08 Apr, 2025 | 04:40
Updated-27 Jan, 2026 | 17:55
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.

Action-Not Available
Vendor-SamsungSamsung Electronics
Product-galaxy_watch_6galaxy_watch_fegalaxy_watch_7wear_osgalaxy_watchgalaxy_watch_4galaxy_watch_5_progalaxy_watch_6_classicgalaxy_watch_5galaxy_watch_ultragalaxy_watch_4_classicSamsung Mobile Devices
CWE ID-CWE-922
Insecure Storage of Sensitive Information
CVE-2025-20912
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-6.2||MEDIUM
EPSS-0.14% / 4.18%
||
7 Day CHG~0.00%
Published-06 Mar, 2025 | 05:04
Updated-02 Feb, 2026 | 18:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watchgalaxy_watch_6_classicwear_osgalaxy_watch_ultragalaxy_watch_6galaxy_watch_fegalaxy_watch_7galaxy_watch_4galaxy_watch_4_classicgalaxy_watch_5_progalaxy_watch_5Samsung Mobile Devices
CWE ID-CWE-922
Insecure Storage of Sensitive Information
CVE-2025-20911
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-4.4||MEDIUM
EPSS-0.13% / 2.74%
||
7 Day CHG~0.00%
Published-06 Mar, 2025 | 05:04
Updated-02 Feb, 2026 | 18:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watchgalaxy_watch_6_classicwear_osgalaxy_watch_ultragalaxy_watch_6galaxy_watch_fegalaxy_watch_7galaxy_watch_4galaxy_watch_4_classicgalaxy_watch_5_progalaxy_watch_5Samsung Mobile Devices
CVE-2025-20910
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-6.2||MEDIUM
EPSS-0.14% / 4.18%
||
7 Day CHG~0.00%
Published-06 Mar, 2025 | 05:04
Updated-02 Feb, 2026 | 18:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery.

Action-Not Available
Vendor-Samsung ElectronicsSamsung
Product-galaxy_watchgalaxy_watch_6_classicwear_osgalaxy_watch_ultragalaxy_watch_6galaxy_watch_fegalaxy_watch_7galaxy_watch_4galaxy_watch_4_classicgalaxy_watch_5_progalaxy_watch_5Samsung Mobile Devices
CWE ID-CWE-276
Incorrect Default Permissions
CVE-2021-25424
Assigner-Samsung Mobile
ShareView Details
Assigner-Samsung Mobile
CVSS Score-8.8||HIGH
EPSS-0.44% / 35.81%
||
7 Day CHG~0.00%
Published-11 Jun, 2021 | 14:33
Updated-03 Aug, 2024 | 20:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.

Action-Not Available
Vendor-SamsungSamsung Electronics
Product-galaxy_watchgalaxy_watch_active_2_firmwaregalaxy_watch_activegalaxy_watch_3gear_s3_firmwaregear_2_neo_firmwaregalaxy_watch_active_2gear_s2galaxy_watch_active_firmwaregear_2_neogear_sgear_s2_firmwaregear_2_firmwaregear_s3galaxy_watch_firmwaregear_s_firmwaregalaxy_watch_3_firmwaregear_2Tizen wearable devices
CWE ID-CWE-287
Improper Authentication